Cisco Cisco IPS 4345 Sensor 릴리즈 노트

다운로드
페이지 60
   
53
Release Notes for Cisco Intrusion Prevention System 7.1(4)E4
OL-25389-01
  Enabling Anomaly Detection
For More Information
For more information about the IME, refer to 
.
Enabling Anomaly Detection
The following section explains how to enable anomaly detection through the IDM, IME, and the CLI. It 
contains the following topics:
Enabling Anomaly Detection Using the IDM or IME
To enable anomaly detection, follow these steps:
Step 1
Log in to the IDM or IME using an account with administrator or operator privileges.
Step 2
Choose Configuration > Policies  > IPS Policies.
Step 3
Select the virtual sensor for which you want to turn on anomaly detection, and then click Edit.
Step 4
Under Anomaly Detection, choose an anomaly detection policy from the Anomaly Detection Policy 
drop-down list. Unless you want to use the default ad0, you must have already added a anomaly detection 
policy by choosing Configuration > Policies > Anomaly Detections > Add
Step 5
Choose Detect as the anomaly detection mode from the AD Operational Mode drop-down list. The 
default is Inactive.
Tip
To discard your changes and close the Edit Virtual Sensor dialog box, click Cancel.
Step 6
Click OK.
Tip
To discard your changes, click Reset.
Step 7
Click Apply to apply your changes and save the revised configuration.
For More Information
For more detailed information about anomaly detection, refer to